diff --git a/freeradius-server.changes b/freeradius-server.changes
index f609cc2..3a698ec 100644
--- a/freeradius-server.changes
+++ b/freeradius-server.changes
@@ -15,7 +15,7 @@ Feature improvements
   * Update dictionary.h3c Closes #2592
   * Update elasticsearch/logstash config for v6.7.0.
   * EAP-PWD security fixes from Mathy Vanhoef. See
-    http://freeradius.org/security/
+    http://freeradius.org/security/  (CVE-2019-11235, bsc#1132549)
 
 Bug fixes
   * Update dynamic_client module and server core so that